$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/428ebf19-faa6-46cb-b693-862a34987465.roa File: 428ebf19-faa6-46cb-b693-862a34987465.roa (raw, json) Hash identifier: A9dKw3sTG1sQp/gZKg4x80FxSq/udtUvipjRMUEdIGc= Subject key identifier: 53:B8:89:09:0A:F9:44:C2:15:52:A2:D7:2F:F4:6A:C0:00:4F:03:C3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72E10A14895C42106C9950D439B4435725324AEC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/428ebf19-faa6-46cb-b693-862a34987465.roa Signing time: Wed 24 Sep 2025 21:32:46 +0000 ROA not before: Wed 24 Sep 2025 21:32:46 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e1:0a:14:89:5c:42:10:6c:99:50:d4:39:b4:43:57:25:32:4a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 21:32:46 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=736e234bdb95da8fa36d92cdc71724c57f0038efb42257573ec7e3c89f467918, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:6a:f1:9f:0f:4c:4a:3b:90:4d:af:27:96: 08:03:0e:c9:4f:fb:ea:e8:4b:3a:d5:26:48:8b:18: 29:a4:82:75:4c:92:ad:83:d1:18:0c:e7:cc:c1:93: 57:04:37:70:c7:c3:e4:04:df:d8:a5:ea:4b:af:1c: b3:07:08:db:30:44:c7:d5:d5:7f:27:a1:92:33:82: 9f:e8:52:cd:c7:c0:c3:c6:bf:ab:9e:75:a6:da:29: d2:e1:cd:0c:a0:06:9b:48:f3:64:74:b0:c5:43:8d: cc:6b:9a:ba:44:b6:18:80:27:13:fb:d1:73:6e:e3: 7e:33:70:28:d0:b4:6c:1e:28:77:75:de:73:9f:24: 43:8e:06:b6:2d:81:f6:73:27:40:4f:29:d5:1e:ee: 6d:a4:5f:62:e9:74:2c:46:7e:c7:47:2b:be:b5:51: b4:ae:b7:cf:2c:4d:28:5a:08:ad:d8:b1:14:19:99: 45:11:4f:3a:3c:60:41:0e:08:dd:65:cf:1c:d2:91: d0:99:6e:d7:44:73:e4:f4:fc:89:5c:53:4f:80:36: ae:90:28:d4:1e:aa:ca:42:a5:6a:55:fc:a3:c4:f3: 4c:d7:8f:e4:c5:cb:be:92:c2:af:c4:f7:68:b6:8a: 92:7a:f7:6b:0d:72:9f:bd:a0:a6:ac:4e:51:68:a2: cf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B8:89:09:0A:F9:44:C2:15:52:A2:D7:2F:F4:6A:C0:00:4F:03:C3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/428ebf19-faa6-46cb-b693-862a34987465.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.241.0/24 Signature Algorithm: sha256WithRSAEncryption 24:e8:90:22:1c:26:51:6a:62:69:42:31:86:f7:27:af:50:de: eb:c9:ba:09:21:5c:dc:d4:23:1f:f1:79:3f:18:cb:cd:d6:ad: 01:0b:39:99:8a:0f:f6:c9:86:db:6b:09:00:05:3b:4a:bf:01: 9f:56:ed:14:e1:3e:dc:c5:37:93:14:a7:4d:8c:f3:b0:cb:ee: 58:4a:4f:b9:95:09:4d:d1:b7:3e:5e:85:8d:b4:28:ef:d1:ae: 7a:32:63:f3:bb:01:f1:8b:8b:9d:32:81:44:aa:47:77:54:c9: 3f:a3:8b:35:fc:15:c0:11:6d:1d:81:22:5a:e0:87:87:cf:2f: e8:3f:c9:e2:9e:3d:4d:b6:77:6d:b3:c8:1f:df:1f:bb:fd:31: 1f:85:3f:be:15:d3:a3:d9:6b:85:9c:ea:46:40:8a:77:9a:ef: 79:63:e4:aa:aa:10:d6:aa:4e:59:47:3f:bc:ae:5a:e3:09:cd: d6:29:19:8a:94:ae:b8:d1:06:70:4d:ff:7d:b8:e3:4b:b4:f8: aa:eb:eb:59:46:05:e3:97:45:e7:9a:ab:16:16:0d:7c:dd:95: 30:0a:63:af:99:d1:b2:70:07:de:b4:7c:52:94:7d:d7:13:8b: cd:be:70:7f:9e:23:a3:97:d7:d5:76:99:fb:d5:90:90:b7:66: 70:61:1d:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcuEKFIlcQhBsmVDUObRDVyUySuwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjEzMjQ2WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzZlMjM0YmRiOTVkYThmYTM2ZDkyY2RjNzE3MjRjNTdm MDAzOGVmYjQyMjU3NTczZWM3ZTNjODlmNDY3OTE4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0Smrxnw9MSjuQTa8nlggDDslP++roSzrVJkiLGCmkgnVM kq2D0RgM58zBk1cEN3DHw+QE39il6kuvHLMHCNswRMfV1X8noZIzgp/oUs3HwMPG v6uedabaKdLhzQygBptI82R0sMVDjcxrmrpEthiAJxP70XNu434zcCjQtGweKHd1 3nOfJEOOBrYtgfZzJ0BPKdUe7m2kX2LpdCxGfsdHK761UbSut88sTShaCK3YsRQZ mUURTzo8YEEOCN1lzxzSkdCZbtdEc+T0/IlcU0+ANq6QKNQeqspCpWpV/KPE80zX j+TFy76Swq/E92i2ipJ692sNcp+9oKasTlFoos9pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUU7iJCQr5RMIVUqLXL/RqwABPA8MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQyOGViZjE5LWZhYTYtNDZjYi1iNjkzLTg2MmEzNDk4NzQ2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQfEwDQYJKoZIhvcNAQELBQADggEBACTokCIcJlFqYmlCMYb3J69Q3uvJ ugkhXNzUIx/xeT8Yy83WrQELOZmKD/bJhttrCQAFO0q/AZ9W7RThPtzFN5MUp02M 87DL7lhKT7mVCU3Rtz5ehY20KO/RrnoyY/O7AfGLi50ygUSqR3dUyT+jizX8FcAR bR2BIlrgh4fPL+g/yeKePU22d22zyB/fH7v9MR+FP74V06PZa4Wc6kZAinea73lj 5KqqENaqTllHP7yuWuMJzdYpGYqUrrjRBnBN/32440u0+Krr61lGBeOXReeaqxYW DXzdlTAKY6+Z0bJwB960fFKUfdcTi82+cH+eI6OX19V2mfvVkJC3ZnBhHag= -----END CERTIFICATE-----Generated at Sat Oct 18 00:16:37 2025 by rpki-client